last executing test programs: 21.165421083s ago: executing program 4 (id=1855): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000084}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x7, 0xf47c34376c57618a}}]}}]}, 0x3c}}, 0x20004811) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 20.804214984s ago: executing program 4 (id=1858): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) r1 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x95f5, 0x10100, 0x0, 0x89}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r1, 0x207a98, 0x363, 0x4, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 19.845535925s ago: executing program 4 (id=1867): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x88081, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x80047441, &(0x7f0000000180)) 19.30351435s ago: executing program 4 (id=1872): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r0, 0x0, 0x160) 19.105072453s ago: executing program 4 (id=1873): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xd03, r0, &(0x7f0000000000)='HS', 0x2, 0x8000000000000000}]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18.477188098s ago: executing program 4 (id=1877): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0xffbe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0x4, 0x2, 0x6, 0x3, 0x103, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x2, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x100, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x1, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x1, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x7, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x12, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x3, 0x71d], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x800004, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x9, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xe, 0x9, 0x8000007, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0xb65, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) 17.916245115s ago: executing program 32 (id=1877): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0xffbe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0x4, 0x2, 0x6, 0x3, 0x103, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x2, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x100, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x1, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x1, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x7, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x12, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x3, 0x71d], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x800004, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x9, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xe, 0x9, 0x8000007, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0xb65, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) 5.274507305s ago: executing program 1 (id=1973): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000034709d405f0530c2acb6010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b40)={0x34, &(0x7f00000004c0)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[], 0x0, 0x0}) 4.941994282s ago: executing program 5 (id=1976): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x12c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xc, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x100, 0x2, [@TCA_U32_SEL={0xf4, 0x5, {0xb, 0x8, 0xe, 0x5, 0x8e80, 0x4, 0x4, 0x7fffffff, [{0x4, 0x7, 0x4, 0xfff}, {0x6, 0x1, 0x9, 0x1}, {0x1, 0x6, 0x0, 0x60000000}, {0x8, 0x20, 0x9, 0x1}, {0x0, 0x7ff, 0x1, 0x3}, {0x9, 0x1, 0x3ff, 0x80000000}, {0x3, 0xfa, 0x0, 0xbaa}, {0xc, 0x3, 0x4, 0x9}, {0x1, 0x10000, 0x38000000, 0x7f}, {0x9, 0x4, 0x2, 0x8}, {0x3, 0x1, 0x0, 0x3}, {0xc53c, 0x9, 0x8, 0x4}, {0x0, 0x5, 0x2, 0x8}, {0x2, 0x6, 0x4, 0x7}]}}, @TCA_U32_LINK={0x8, 0x3, 0x60000000}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 4.062639886s ago: executing program 5 (id=1981): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f00e50000008700060000090581030002c0b9ff09058202080000fd00090503020002"], 0x0) ioctl$EVIOCRMFF(r1, 0x550c, 0x0) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.836383341s ago: executing program 3 (id=1982): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4300, &(0x7f0000000380)={0x0, 0x0, 0x10100, 0x0, 0xd0}, &(0x7f0000000280)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='*'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.669125767s ago: executing program 3 (id=1983): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x9, 0x2a7345, 0x20d37}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x6, r2, 0x334, 0x10000, 0x0, 0x100000, 0x0, 0xffffffffffffffff, 0xffffffffffffff7b}) 3.26076636s ago: executing program 3 (id=1985): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) socketpair$unix(0x1, 0x5, 0x0, 0x0) 2.620464138s ago: executing program 1 (id=1988): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xff}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb30}], 0x1, 0x40002042, 0x0) 2.27500865s ago: executing program 0 (id=1989): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r2, 0x3, 0x7, &(0x7f0000001dc0)=[{}, {}, {}, {}, {}, {}, {}], 0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) io_destroy(r2) 2.12295633s ago: executing program 5 (id=1990): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0xd000}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.070492469s ago: executing program 2 (id=1991): syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001080), 0xffffffffffffffff) socket$kcm(0x2, 0xd, 0x2) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.896928381s ago: executing program 0 (id=1992): mount$9p_fd(0x0, 0x0, 0x0, 0x84, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xa) fchdir(r2) sendmmsg$unix(r0, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x4, 0x0}}], 0x2, 0x40008004) 1.886274963s ago: executing program 3 (id=1993): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 1.816485109s ago: executing program 5 (id=1994): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xfec8}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x200008d}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 1.688061526s ago: executing program 0 (id=1995): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = memfd_secret(0x80000) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) fchownat(r0, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) 1.619885024s ago: executing program 5 (id=1996): r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x103) fcntl$notify(r0, 0x402, 0x8000003d) fcntl$setsig(r0, 0xa, 0x21) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x1000000d) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0xc32a4cddd557707a) fallocate(r1, 0x0, 0x0, 0x9000f3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeed, 0x80010, r1, 0x5000) 1.618806543s ago: executing program 2 (id=2006): r0 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x12, r0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}}) 1.360523524s ago: executing program 0 (id=1997): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c0005800500194003"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) timer_create(0x7, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 1.186637988s ago: executing program 2 (id=1998): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006280)={0x2020, 0x0, 0x0}, 0x2067) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x81, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x130, 0x0, 0x8, {0x8, 0x2, 0x0, '\x00', {0x1, 0x1, 0x2, 0xffffffff, 0x0, 0x0, 0x8000, '\x00', 0xffffffffffffffff, 0x29, 0xfff7fffffffffffa, 0x4, {0x100000000, 0x1fffffe}, {0x1f94, 0x6}, {0x5, 0x7}, {0x6, 0xff}, 0x200008, 0xe19, 0x5, 0x2}}}}) statx(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x100, 0x801, 0x0) 1.145165306s ago: executing program 1 (id=1999): r0 = io_uring_setup(0xf46, &(0x7f00000002c0)={0x0, 0x6c04, 0x0, 0x3, 0x20000004}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r2, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x4e22, 0x2, @empty, 0x7f}, 0x1c, 0x0}, 0x24004800) close_range(r0, 0xffffffffffffffff, 0x0) 1.06377572s ago: executing program 3 (id=2000): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'vcan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="0201"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000}, 0x1) 987.510525ms ago: executing program 0 (id=2001): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2d, 0x0, 0x0, 0x6}]}, 0xfffffffffffffeea) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0xfac7, 0x0, 0x0, 0x0) 944.578579ms ago: executing program 2 (id=2002): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0xd000, 0x4}}, "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", "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"}) 840.12162ms ago: executing program 1 (id=2003): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x7, 0x3, 0x1c, 0x5, 0x2, 0x4d, 0x3, 0xf9, 0x1, 0x80, 0xc, 0x8000200000000000}, {0x6, 0x80, 0x8, 0xc4, 0x4, 0x7, 0x6, 0x3, 0x7, 0xff, 0x40, 0x7d}, {0xe2a5, 0x401, 0x1, 0x9, 0x2, 0x6, 0x8, 0xb, 0xff, 0x6, 0x56, 0x3, 0x100}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0xffffffffffffffff, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x100000000004, 0x0, 0x0, 0x2, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 775.312038ms ago: executing program 3 (id=2004): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @broadcast}}, 0x24) r1 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 381.392182ms ago: executing program 2 (id=2005): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x300000d, 0x12, r2, 0x1000) 379.680184ms ago: executing program 5 (id=2007): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001d}) read$char_usb(r2, &(0x7f0000000100)=""/169, 0xa9) 256.65678ms ago: executing program 1 (id=2008): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0xffffffff, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x3, 0x3, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x86dd}}}]}, 0x38}}, 0x4008cc0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 151.536273ms ago: executing program 2 (id=2009): ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x82b, 0x6, 0x1, {0x1, @vbi={0xfffffff9, 0x1, 0xee, 0x43353039, [0x0, 0x8], [0xfff, 0xada], 0x2}}, 0xd}) r0 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc72, 0x0, 0x7}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 72.082352ms ago: executing program 0 (id=2010): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x7f}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0xa, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xffffffff, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8020, 0x3ff, 0x3, 0x1, 0x3, 0xba52, 0x4000800, 0x2, 0x200, 0xffffffff, 0x400008, 0xe, 0x2, 0x5, 0xde, 0x8, 0x4, 0x1, 0x199f, 0x8, 0x8000002, 0x9, 0xe, 0x4, 0x6, 0x4001000, 0x7, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8020, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x8001, 0x72c, 0x1c32, 0x101, 0x8, 0x10400, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x2, 0x0, 0x981, 0x4, 0x7ff, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0x8, 0x6, 0x96, 0xfffffff9, 0xc, 0x0, 0x2, 0x401, 0xd, 0x3, 0x379, 0x8, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0xb, 0x6, 0x2c2], [0x401, 0xc584, 0xffff, 0xcd1, 0x7, 0x23, 0x2, 0x4, 0xb, 0x10, 0x5, 0xd, 0x7, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x11, 0x1000, 0x4, 0x4, 0xf, 0x9, 0xfffffffe, 0x5, 0x80, 0x3, 0x9, 0x44, 0x2, 0x80000003, 0x5, 0x10000000, 0x0, 0x3, 0x8, 0x8001, 0x1000, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x2, 0x1010001, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0xfffffffe, 0x7d, 0x403, 0x5], [0x1e6a, 0x7fff, 0x4, 0x5, 0x88, 0x2, 0x6, 0x0, 0x50, 0x2, 0x75f, 0xb, 0x402, 0x800, 0x4, 0x5, 0x80, 0x7, 0x3fa6, 0x4, 0xffffffff, 0x5, 0x1e0, 0x4, 0x5, 0x4, 0x3, 0x4, 0x1ff, 0x9, 0x3b, 0xb, 0x1, 0x800, 0xa80a, 0x65f413f9, 0x104, 0x8, 0x8a8, 0x1000, 0x40, 0x7, 0x0, 0x4, 0x4, 0x18, 0x4d13, 0x6, 0x7fff, 0x2, 0xffffffff, 0x401, 0x9, 0x200, 0x7, 0x6, 0x0, 0x7, 0xe, 0x2, 0xe, 0xf, 0xfffffff9, 0x6]}, 0x45c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/73, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 0s ago: executing program 1 (id=2011): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, {0x6, 0x0, 0x0, 0xc3, 0x0, 0x8000000, 0x0, 0x0, 0x81, 0xc000, 0x2000, 0x0, 0x0, 0x0, 0xff000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x29, 0x1c000, 0x0, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0) kernel console output (not intermixed with test programs): T7450] hsr_slave_1: entered promiscuous mode [ 188.265705][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.310791][ T5921] usb 1-1: USB disconnect, device number 10 [ 188.334905][ T5921] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 188.475892][ T5921] cp210x 1-1:0.0: device disconnected [ 188.905596][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.234477][ T1326] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.234499][ T1326] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.315710][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.490399][ T1326] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.490420][ T1326] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.546175][ T7643] chnl_net:caif_netlink_parms(): no params data found [ 189.808739][ T1326] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.808760][ T1326] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.148827][ T1326] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.148848][ T1326] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.345553][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.455911][ T7643] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.456150][ T7643] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.456382][ T7643] bridge_slave_0: entered allmulticast mode [ 190.459139][ T7643] bridge_slave_0: entered promiscuous mode [ 190.462406][ T7643] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.462627][ T7643] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.462794][ T7643] bridge_slave_1: entered allmulticast mode [ 190.464931][ T7643] bridge_slave_1: entered promiscuous mode [ 190.506161][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.716109][ T7643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.762041][ T7643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.041418][ T7643] team0: Port device team_slave_0 added [ 191.072924][ T7643] team0: Port device team_slave_1 added [ 191.199934][ T1326] bridge_slave_1: left allmulticast mode [ 191.199967][ T1326] bridge_slave_1: left promiscuous mode [ 191.200228][ T1326] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.256209][ T1326] bridge_slave_0: left allmulticast mode [ 191.256230][ T1326] bridge_slave_0: left promiscuous mode [ 191.256409][ T1326] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.385548][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.965360][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.368442][ T1326] bond1 (unregistering): (slave geneve2): Releasing active interface [ 192.425667][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.406178][ T1326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.465513][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.466358][ T1326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.505602][ T1326] bond0 (unregistering): Released all slaves [ 194.186268][ T1326] bond1 (unregistering): Released all slaves [ 194.351231][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.351320][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.473342][ T7643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.473358][ T7643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.473381][ T7643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.480376][ T7643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.480391][ T7643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.480413][ T7643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.508472][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.985821][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.014367][ T7643] hsr_slave_0: entered promiscuous mode [ 195.021669][ T7643] hsr_slave_1: entered promiscuous mode [ 195.022669][ T7643] debugfs: 'hsr0' already exists in 'hsr' [ 195.022697][ T7643] Cannot create hsr debugfs directory [ 195.545601][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.601701][ T7450] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 195.727829][ T7450] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 195.761466][ T7450] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 195.845545][ T1326] hsr_slave_0: left promiscuous mode [ 195.865601][ T1326] hsr_slave_1: left promiscuous mode [ 195.870207][ T1326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.870236][ T1326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.936531][ T1326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.936561][ T1326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.030102][ T1326] veth1_vlan: left promiscuous mode [ 196.030331][ T1326] veth0_vlan: left promiscuous mode [ 196.585852][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.625529][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.906187][ T1326] team0 (unregistering): Port device team_slave_1 removed [ 198.025528][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.117403][ T1326] team0 (unregistering): Port device team_slave_0 removed [ 198.665863][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.705606][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.116247][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.334506][ T7450] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 200.746051][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.884577][ T7450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.930277][ T7450] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.952703][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.952927][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.053684][ T4570] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.054033][ T4570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.065598][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.452657][ T1326] IPVS: stop unused estimator thread 0... [ 201.578929][ T7450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.728809][ T7450] veth0_vlan: entered promiscuous mode [ 201.778699][ T7643] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 201.785717][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.814429][ T7450] veth1_vlan: entered promiscuous mode [ 201.822011][ T7643] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 201.853438][ T7643] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 201.892538][ T7643] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 202.003090][ T7450] veth0_macvtap: entered promiscuous mode [ 202.014435][ T7450] veth1_macvtap: entered promiscuous mode [ 202.057473][ T7450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.081434][ T7450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.110668][ T4592] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.110713][ T4592] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.110746][ T4592] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.110778][ T4592] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.396043][ T7643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.398718][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.398733][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.505015][ T7643] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.512634][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.512650][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.541403][ T4592] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.541598][ T4592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.564161][ T6193] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.564339][ T6193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.826193][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.214679][ T7777] block nbd2: shutting down sockets [ 203.230525][ T7780] netlink: 5 bytes leftover after parsing attributes in process `syz.4.706'. [ 203.230645][ T7780] 0{X: renamed from gretap0 (while UP) [ 203.259275][ T7780] 0{X: entered allmulticast mode [ 203.259747][ T7780] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 203.342032][ T7643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.411478][ T5921] libceph: connect (1)[c::]:6789 error -101 [ 203.411706][ T5921] libceph: mon0 (1)[c::]:6789 connect error [ 203.416876][ T5921] libceph: connect (1)[c::]:6789 error -101 [ 203.417091][ T5921] libceph: mon0 (1)[c::]:6789 connect error [ 203.502435][ T7782] ceph: No mds server is up or the cluster is laggy [ 203.513331][ T7786] syzkaller1: entered promiscuous mode [ 203.513359][ T7786] syzkaller1: entered allmulticast mode [ 203.875982][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.045379][ T5921] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 204.105995][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.205142][ T5921] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 204.205316][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.205336][ T5921] usb 2-1: Product: syz [ 204.205347][ T5921] usb 2-1: Manufacturer: syz [ 204.205359][ T5921] usb 2-1: SerialNumber: syz [ 204.367938][ T7643] veth0_vlan: entered promiscuous mode [ 204.413810][ T7643] veth1_vlan: entered promiscuous mode [ 204.845977][ T7643] veth0_macvtap: entered promiscuous mode [ 204.879710][ T7643] veth1_macvtap: entered promiscuous mode [ 204.912889][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.967188][ T7643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.070843][ T7643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.150965][ T1326] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.156797][ T1326] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.175745][ T1326] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.250712][ T1326] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.347410][ T5921] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 205.347447][ T5921] cdc_ncm 2-1:1.0: setting rx_max = 16384 [ 205.567364][ T5921] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 205.643911][ T5921] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 205.680769][ T5921] usb 2-1: USB disconnect, device number 7 [ 205.700385][ T5921] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 205.742268][ T7826] netlink: 'syz.2.724': attribute type 4 has an invalid length. [ 205.862903][ T1535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.862922][ T1535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.952114][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.028098][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.028116][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.596688][ T7854] sch_tbf: burst 9 is lower than device bond0 mtu (1514) ! [ 206.667506][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 206.667655][ T5844] Bluetooth: hci0: command 0x0406 tx timeout [ 206.986476][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.124627][ T7869] 9pnet: p9_errstr2errno: server reported unknown error l [ 207.147048][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.025558][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.101814][ T7881] input: syz0 as /devices/virtual/input/input10 [ 208.603368][ T7901] input: syz1 as /devices/virtual/input/input11 [ 208.918984][ T37] audit: type=1326 audit(1756379962.383:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7883 comm="syz.1.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b792ebe9 code=0x7fc00000 [ 209.066159][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.706359][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.710555][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.113220][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.220041][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.750418][ T5850] Bluetooth: hci0: command 0x0406 tx timeout [ 210.755441][ T31] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 210.755472][ T31] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 211.145661][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.211417][ T7965] syzkaller1: entered promiscuous mode [ 211.211445][ T7965] syzkaller1: entered allmulticast mode [ 211.789144][ T7980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'. [ 211.801111][ T7980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'. [ 212.186847][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.475374][ T5921] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 212.645559][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 212.651755][ T5921] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 212.651782][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.651800][ T5921] usb 3-1: Product: syz [ 212.651812][ T5921] usb 3-1: Manufacturer: syz [ 212.651824][ T5921] usb 3-1: SerialNumber: syz [ 212.683137][ T5921] usb 3-1: config 0 descriptor?? [ 212.902350][ T5921] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 212.985357][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 212.985840][ T31] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 212.985857][ T31] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 212.991958][ T8014] binder: 8013:8014 ioctl c0306201 2000000003c0 returned -14 [ 213.225716][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.225959][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.393682][ T8026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.791'. [ 213.745563][ T8029] netlink: 40 bytes leftover after parsing attributes in process `syz.3.792'. [ 213.745594][ T8029] netlink: 40 bytes leftover after parsing attributes in process `syz.3.792'. [ 213.746291][ T8029] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 213.915337][ T5913] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 213.918886][ T5921] gspca_sunplus: reg_w_riv err -71 [ 213.918982][ T5921] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 213.930272][ T5921] usb 3-1: USB disconnect, device number 8 [ 214.069079][ T5913] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 214.069109][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 214.069131][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 214.069151][ T5913] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 214.069189][ T5913] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 214.069208][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.074897][ T5913] usb 1-1: config 0 descriptor?? [ 214.266238][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.271728][ T8046] mkiss: ax0: crc mode is auto. [ 214.521249][ T5913] plantronics 0003:047F:FFFF.0006: ignoring exceeding usage max [ 214.571168][ T5913] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 215.145396][ T5850] Bluetooth: hci4: command 0x0c1a tx timeout [ 215.145896][ T31] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 215.145915][ T31] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 215.313375][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.765355][ T8078] netlink: 96 bytes leftover after parsing attributes in process `syz.3.807'. [ 216.267143][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.365316][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 216.388245][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.502055][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.813'. [ 216.516373][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 216.518694][ T9] usb 4-1: config 0 has no interfaces? [ 216.518728][ T9] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 216.518748][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.523887][ T9] usb 4-1: config 0 descriptor?? [ 216.717308][ T5905] usb 1-1: USB disconnect, device number 11 [ 216.783421][ T5921] usb 4-1: USB disconnect, device number 3 [ 217.465536][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.505637][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.636767][ T8148] netlink: 'syz.3.831': attribute type 10 has an invalid length. [ 218.841419][ T8148] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 218.955328][ T991] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 219.009971][ C1] Illegal XDP return value 16128 on prog (id 116) dev veth1, expect packet loss! [ 219.022412][ T8153] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 219.115385][ T991] usb 1-1: Using ep0 maxpacket: 16 [ 219.125369][ T991] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.125424][ T991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 219.125448][ T991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 219.125469][ T991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 219.125492][ T991] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.127821][ T991] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 219.127844][ T991] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 219.127861][ T991] usb 1-1: Manufacturer: syz [ 219.155045][ T991] usb 1-1: config 0 descriptor?? [ 219.306523][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.313162][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.465593][ T5850] Bluetooth: hci1: command 0x0c1a tx timeout [ 219.466052][ T31] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 219.466070][ T31] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 219.548821][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.603033][ T991] rc_core: IR keymap rc-hauppauge not found [ 219.603051][ T991] Registered IR keymap rc-empty [ 219.603912][ T991] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 219.635370][ T991] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 219.667292][ T991] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 219.719474][ T991] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input12 [ 219.816551][ T991] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 219.836732][ T991] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 219.855654][ T991] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 219.875428][ T991] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 219.895527][ T991] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 219.915553][ T991] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 219.935546][ T991] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 219.960216][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.964449][ T991] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 219.979413][ T991] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 219.995510][ T991] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 220.146997][ T991] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 220.147020][ T991] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 220.248097][ T991] usb 1-1: USB disconnect, device number 12 [ 220.613326][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.625730][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.895415][ T991] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 222.049900][ T991] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 222.049927][ T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.083848][ T991] usb 5-1: config 0 descriptor?? [ 222.181639][ T8229] netlink: 'syz.3.858': attribute type 11 has an invalid length. [ 222.345850][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.505727][ T5850] Bluetooth: hci5: command 0x0c1a tx timeout [ 222.508838][ T31] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 222.508863][ T31] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 222.665581][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.353281][ T991] pegasus 5-1:0.0: can't reset MAC [ 223.353623][ T991] pegasus 5-1:0.0: probe with driver pegasus failed with error -5 [ 223.387762][ T991] usb 5-1: USB disconnect, device number 6 [ 223.705507][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.709286][ T8257] loop8: detected capacity change from 0 to 7 [ 223.715035][ T8257] Dev loop8: unable to read RDB block 7 [ 223.715079][ T8257] loop8: unable to read partition table [ 223.715491][ T5929] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 223.715513][ T8257] loop8: partition table beyond EOD, truncated [ 223.715530][ T8257] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 223.843041][ T8257] Dev loop8: unable to read RDB block 7 [ 223.843195][ T8257] loop8: unable to read partition table [ 223.843429][ T8257] loop8: partition table beyond EOD, truncated [ 223.843445][ T8257] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 223.865361][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 223.869784][ T5929] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 223.869811][ T5929] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.869827][ T5929] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.879500][ T5929] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.879526][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.879543][ T5929] usb 4-1: Product: syz [ 223.879555][ T5929] usb 4-1: Manufacturer: syz [ 223.879566][ T5929] usb 4-1: SerialNumber: syz [ 224.355673][ T5929] usb 4-1: 0:2 : does not exist [ 224.788791][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.959608][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.879'. [ 225.066034][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.270138][ T5929] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 225.391179][ T5929] usb 4-1: USB disconnect, device number 4 [ 225.406418][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.777229][ T8281] team0: Port device team_slave_0 removed [ 225.779771][ T8290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.779935][ T8290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.780078][ T8290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.780941][ T8290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.781122][ T8290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.385425][ T5913] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 226.539993][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.540024][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.540045][ T5913] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 226.540083][ T5913] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.540104][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.553389][ T5913] usb 3-1: config 0 descriptor?? [ 226.934400][ T8318] syz.4.893 (8318): drop_caches: 4 [ 227.040683][ T5913] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 227.139503][ T8320] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 227.365817][ T31] usb 3-1: USB disconnect, device number 9 [ 227.582577][ T8328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.897'. [ 227.670669][ T8328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.897'. [ 227.741992][ T6193] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.747373][ T6193] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.747418][ T6193] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.749865][ T6193] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.945661][ T31] net_ratelimit: 4 callbacks suppressed [ 227.945680][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.437603][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.041762][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.551987][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.085348][ T5913] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 230.116123][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.222319][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.222569][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.227885][ T6195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.228958][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.256996][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.338259][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.338316][ T5913] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 230.338337][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.358166][ T5913] usb 3-1: config 0 descriptor?? [ 230.456048][ T5913] pwc: Askey VC010 type 2 USB webcam detected. [ 230.818976][ T5913] pwc: recv_control_msg error -32 req 02 val 2b00 [ 230.820577][ T5913] pwc: recv_control_msg error -32 req 02 val 2700 [ 230.822616][ T5913] pwc: recv_control_msg error -32 req 02 val 2c00 [ 231.027818][ T5913] pwc: recv_control_msg error -71 req 04 val 1300 [ 231.033006][ T5913] pwc: recv_control_msg error -71 req 04 val 1400 [ 231.037133][ T5913] pwc: recv_control_msg error -71 req 02 val 2000 [ 231.043892][ T5913] pwc: recv_control_msg error -71 req 02 val 2100 [ 231.044412][ T5913] pwc: recv_control_msg error -71 req 04 val 1500 [ 231.045437][ T5913] pwc: recv_control_msg error -71 req 02 val 2500 [ 231.048175][ T5913] pwc: recv_control_msg error -71 req 02 val 2400 [ 231.055426][ T5913] pwc: recv_control_msg error -71 req 02 val 2600 [ 231.064292][ T5913] pwc: recv_control_msg error -71 req 02 val 2900 [ 231.068388][ T5913] pwc: recv_control_msg error -71 req 02 val 2800 [ 231.071331][ T5913] pwc: recv_control_msg error -71 req 04 val 1100 [ 231.072341][ T5913] pwc: recv_control_msg error -71 req 04 val 1200 [ 231.201113][ T5913] pwc: Registered as video103. [ 231.204320][ T5913] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 231.262519][ T5913] usb 3-1: USB disconnect, device number 10 [ 232.465090][ T8403] netlink: 40 bytes leftover after parsing attributes in process `syz.0.922'. [ 232.587141][ T5905] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 232.743990][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.744021][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.744041][ T5905] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 232.744079][ T5905] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 232.744099][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.758939][ T5905] usb 5-1: config 0 descriptor?? [ 232.783256][ T8414] netlink: 56 bytes leftover after parsing attributes in process `syz.0.927'. [ 233.234013][ T9] net_ratelimit: 2 callbacks suppressed [ 233.234032][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.257315][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.276133][ T5905] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 234.265506][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.313503][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.330845][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.405132][ T45] usb 5-1: USB disconnect, device number 7 [ 235.603027][ T8492] ======================================================= [ 235.603027][ T8492] WARNING: The mand mount option has been deprecated and [ 235.603027][ T8492] and is ignored by this kernel. Remove the mand [ 235.603027][ T8492] option from the mount to silence this warning. [ 235.603027][ T8492] ======================================================= [ 235.952883][ T1326] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.954204][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.976221][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.335927][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.355355][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.564144][ T37] audit: type=1326 audit(1756379990.013:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8509 comm="syz.2.968" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d2ae9ebe9 code=0x0 [ 237.153603][ T37] audit: type=1804 audit(1756379990.573:19): pid=8531 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.976" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=27467 res=1 errno=0 [ 237.272842][ T991] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 237.418018][ T991] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 237.418045][ T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.467789][ T991] usb 5-1: config 0 descriptor?? [ 237.910700][ T45] libceph: connect (1)[c::]:6789 error -101 [ 237.913526][ T45] libceph: mon0 (1)[c::]:6789 connect error [ 237.922466][ T45] libceph: connect (1)[c::]:6789 error -101 [ 237.932034][ T45] libceph: mon0 (1)[c::]:6789 connect error [ 238.191322][ T5929] libceph: connect (1)[c::]:6789 error -101 [ 238.192593][ T5929] libceph: mon0 (1)[c::]:6789 connect error [ 238.616905][ T8545] ceph: No mds server is up or the cluster is laggy [ 238.704389][ T45] libceph: connect (1)[c::]:6789 error -101 [ 238.705923][ T45] libceph: mon0 (1)[c::]:6789 connect error [ 238.786152][ T991] usb 5-1: Cannot set autoneg [ 238.786432][ T991] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 238.842977][ T991] usb 5-1: USB disconnect, device number 8 [ 238.878979][ T8562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.902798][ T8562] bond0: (slave rose0): Enslaving as an active interface with an up link [ 239.515404][ T991] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 239.670986][ T991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.671017][ T991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.671036][ T991] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 239.671075][ T991] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 239.671094][ T991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.712652][ T991] usb 4-1: config 0 descriptor?? [ 239.825305][ T5929] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 239.990831][ T5929] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 239.990877][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.990899][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.990974][ T5929] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 239.992596][ T5929] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 239.992619][ T5929] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 239.992636][ T5929] usb 2-1: Manufacturer: syz [ 240.044867][ T5929] usb 2-1: config 0 descriptor?? [ 240.227909][ T991] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 240.311031][ T8610] veth1_to_bridge: entered promiscuous mode [ 240.311403][ T8610] veth1_to_bridge: left promiscuous mode [ 240.507377][ T5929] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 240.532886][ T5929] appleir 0003:05AC:8243.000A: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 241.522328][ T9] usb 2-1: USB disconnect, device number 8 [ 242.269580][ T31] usb 4-1: USB disconnect, device number 5 [ 244.058926][ T8717] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 244.175029][ T8720] Bluetooth: hci0: invalid len left 7, exp >= 52 [ 245.401811][ T5930] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 245.550572][ T5930] usb 3-1: Using ep0 maxpacket: 32 [ 245.553324][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.553349][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.553384][ T5930] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 245.553402][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.601580][ T5930] usb 3-1: config 0 descriptor?? [ 245.626182][ T5930] hub 3-1:0.0: USB hub found [ 245.823336][ T8776] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1058'. [ 245.826387][ T5930] hub 3-1:0.0: 1 port detected [ 246.439440][ T9] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 246.449703][ T5920] usb 3-1: USB disconnect, device number 11 [ 246.459665][ T9] usb 3-1: Failed to suspend device, error -19 [ 248.225828][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.532881][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.219370][ T8848] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 249.488208][ T5905] kernel write not supported for file bpf-prog (pid: 5905 comm: kworker/0:4) [ 249.565874][ T8856] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1089'. [ 249.898318][ T8860] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 250.901290][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1107'. [ 250.901323][ T8901] netlink: 'syz.4.1107': attribute type 1 has an invalid length. [ 250.901336][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1107'. [ 250.901601][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1107'. [ 250.901617][ T8901] netlink: 'syz.4.1107': attribute type 1 has an invalid length. [ 250.901628][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1107'. [ 251.029592][ T8906] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1109'. [ 252.428382][ T8960] sctp: [Deprecated]: syz.4.1131 (pid 8960) Use of int in max_burst socket option deprecated. [ 252.428382][ T8960] Use struct sctp_assoc_value instead [ 252.613747][ T9] libceph: connect (1)[c::]:6789 error -101 [ 252.614078][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 252.614606][ T9] libceph: connect (1)[c::]:6789 error -101 [ 252.614803][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 252.702098][ T8965] ceph: No mds server is up or the cluster is laggy [ 252.890053][ T8978] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 255.768563][ T9045] netlink: 'syz.4.1162': attribute type 1 has an invalid length. [ 255.798231][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.798304][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.015040][ T9045] bond2: entered promiscuous mode [ 256.028884][ T9045] 8021q: adding VLAN 0 to HW filter on device bond2 [ 256.330388][ T9047] 8021q: adding VLAN 0 to HW filter on device bond2 [ 256.330822][ T9047] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 256.330840][ T9047] bond2: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 256.403274][ T9047] bond2: (slave vxcan1): making interface the new active one [ 256.403289][ T9047] vxcan1: entered promiscuous mode [ 256.416647][ T9047] bond2: (slave vxcan1): Enslaving as an active interface with an up link [ 256.655221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 258.381980][ T9092] all: renamed from bridge_slave_0 (while UP) [ 258.647713][ T9096] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1180'. [ 260.912274][ T9122] netlink: 'syz.1.1189': attribute type 1 has an invalid length. [ 260.912295][ T9122] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1189'. [ 260.912322][ T9122] netlink: 'syz.1.1189': attribute type 2 has an invalid length. [ 260.912333][ T9122] netlink: 'syz.1.1189': attribute type 1 has an invalid length. [ 261.002030][ T9123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1190'. [ 261.112644][ T9123] : entered promiscuous mode [ 261.320644][ T9134] netlink: 146780 bytes leftover after parsing attributes in process `syz.2.1194'. [ 261.431115][ T9138] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.085773][ T9154] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1201'. [ 264.004318][ T9193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1217'. [ 264.375300][ T5930] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 264.527847][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.527878][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.527918][ T5930] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 264.527939][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.575786][ T5930] usb 4-1: config 0 descriptor?? [ 264.675395][ T31] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 264.846681][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 264.850222][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.850277][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 264.850301][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 264.850322][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 264.850340][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.852693][ T31] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 264.852718][ T31] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 264.852735][ T31] usb 3-1: Manufacturer: syz [ 264.866275][ T31] usb 3-1: config 0 descriptor?? [ 264.995958][ T5930] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 264.996092][ T5930] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 265.001149][ T5930] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.000B/input/input15 [ 265.057988][ T5930] cm6533_jd 0003:0D8C:0022.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 265.250202][ T31] rc_core: IR keymap rc-hauppauge not found [ 265.250223][ T31] Registered IR keymap rc-empty [ 265.250382][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 265.265698][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 265.286850][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 265.289930][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16 [ 265.314582][ T5920] usb 4-1: USB disconnect, device number 6 [ 265.321524][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 265.349630][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 265.365728][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 265.386002][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 265.405665][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 265.435553][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 265.466125][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 265.485661][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 265.505456][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 265.525512][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 265.602544][ T31] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 265.602568][ T31] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 265.643044][ T31] usb 3-1: USB disconnect, device number 12 [ 266.141660][ T9230] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1233'. [ 267.745402][ T5905] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 267.898725][ T5905] usb 5-1: config 160 has an invalid interface number: 200 but max is 0 [ 267.898752][ T5905] usb 5-1: config 160 has no interface number 0 [ 267.898797][ T5905] usb 5-1: config 160 interface 200 has no altsetting 0 [ 267.903060][ T5905] usb 5-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 267.903088][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.903105][ T5905] usb 5-1: Product: syz [ 267.903125][ T5905] usb 5-1: Manufacturer: syz [ 267.903137][ T5905] usb 5-1: SerialNumber: syz [ 268.203589][ T5905] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 268.203656][ T5905] usb 5-1: MIDIStreaming interface descriptor not found [ 268.286668][ T5905] usb 5-1: USB disconnect, device number 9 [ 268.777737][ T9290] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 269.357730][ T9301] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1264'. [ 270.028336][ T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 270.217317][ T31] usb 1-1: config index 0 descriptor too short (expected 72, got 10) [ 270.217343][ T31] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 270.217359][ T31] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 270.312446][ T31] usb 1-1: string descriptor 0 read error: -71 [ 270.312598][ T31] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 270.312619][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.371411][ T31] usb 1-1: can't set config #1, error -71 [ 270.391696][ T31] usb 1-1: USB disconnect, device number 13 [ 271.264842][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.505441][ T5905] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 272.668020][ T5905] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 272.668078][ T5905] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 272.668102][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 272.668125][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 272.668149][ T5905] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 272.668187][ T5905] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 272.668207][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.708263][ T5905] usb 1-1: config 0 descriptor?? [ 272.709334][ T9357] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 272.785678][ T9370] ipvlan2: entered promiscuous mode [ 273.139476][ T5905] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 273.139515][ T5905] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 273.139539][ T5905] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 273.139563][ T5905] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 273.139586][ T5905] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 273.139609][ T5905] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 273.221753][ T5905] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 273.519959][ T5905] usb 1-1: USB disconnect, device number 14 [ 273.565318][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 273.715319][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 273.718056][ T31] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 273.718081][ T31] usb 4-1: config 0 has no interface number 0 [ 273.718132][ T31] usb 4-1: config 0 interface 184 has no altsetting 0 [ 273.723427][ T31] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 273.723454][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.723471][ T31] usb 4-1: Product: syz [ 273.723483][ T31] usb 4-1: Manufacturer: syz [ 273.723494][ T31] usb 4-1: SerialNumber: syz [ 273.732013][ T31] usb 4-1: config 0 descriptor?? [ 273.812030][ T31] smsc75xx v1.0.0 [ 273.976939][ T9394] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.083176][ T9396] net_ratelimit: 1 callbacks suppressed [ 274.083193][ T9396] openvswitch: netlink: Multiple metadata blocks provided [ 274.764419][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 274.966395][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 274.966424][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 274.966441][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 274.966459][ T31] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 274.971147][ T31] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 274.994082][ T31] usb 4-1: USB disconnect, device number 7 [ 275.094452][ T9419] netlink: 'syz.4.1312': attribute type 1 has an invalid length. [ 275.176218][ T9419] 8021q: adding VLAN 0 to HW filter on device bond3 [ 275.264275][ T9421] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 275.292684][ T9421] bond3: (slave batadv1): making interface the new active one [ 275.308185][ T9421] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 276.165551][ T9443] kvm: emulating exchange as write [ 276.214852][ T9425] syz.1.1315: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 276.215041][ T9425] CPU: 1 UID: 0 PID: 9425 Comm: syz.1.1315 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 276.215062][ T9425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 276.215076][ T9425] Call Trace: [ 276.215084][ T9425] [ 276.215092][ T9425] dump_stack_lvl+0x189/0x250 [ 276.215126][ T9425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.215150][ T9425] ? __pfx__printk+0x10/0x10 [ 276.215172][ T9425] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 276.215190][ T9425] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 276.215209][ T9425] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 276.215229][ T9425] warn_alloc+0x22e/0x3b0 [ 276.215272][ T9425] ? __pfx_warn_alloc+0x10/0x10 [ 276.215304][ T9425] ? __get_vm_area_node+0x2bc/0x350 [ 276.215327][ T9425] ? vb2_vmalloc_alloc+0xef/0x340 [ 276.215355][ T9425] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 276.215407][ T9425] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 276.215431][ T9425] ? vb2_vmalloc_alloc+0xb2/0x340 [ 276.215456][ T9425] ? __kasan_kmalloc+0x93/0xb0 [ 276.215481][ T9425] vmalloc_user_noprof+0xad/0xf0 [ 276.215504][ T9425] ? vb2_vmalloc_alloc+0xef/0x340 [ 276.215528][ T9425] vb2_vmalloc_alloc+0xef/0x340 [ 276.215551][ T9425] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 276.215575][ T9425] __vb2_queue_alloc+0x9c2/0x15a0 [ 276.215626][ T9425] vb2_core_reqbufs+0xc31/0x1420 [ 276.215669][ T9425] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 276.215690][ T9425] ? vb2_verify_memory_type+0x1fc/0x570 [ 276.215715][ T9425] ? vb2_reqbufs+0x3a9/0x630 [ 276.215747][ T9425] v4l2_m2m_ioctl_reqbufs+0x110/0x200 [ 276.215777][ T9425] __video_do_ioctl+0xc9e/0xdb0 [ 276.215812][ T9425] ? __pfx___video_do_ioctl+0x10/0x10 [ 276.215852][ T9425] video_usercopy+0x871/0x14f0 [ 276.215887][ T9425] ? __pfx___video_do_ioctl+0x10/0x10 [ 276.215910][ T9425] ? __pfx_video_usercopy+0x10/0x10 [ 276.215931][ T9425] ? smack_file_ioctl+0x2ac/0x340 [ 276.215969][ T9425] ? __fget_files+0x2a/0x420 [ 276.215991][ T9425] ? __fget_files+0x3a6/0x420 [ 276.216018][ T9425] v4l2_ioctl+0x18d/0x1e0 [ 276.216041][ T9425] ? __pfx_v4l2_ioctl+0x10/0x10 [ 276.216064][ T9425] __se_sys_ioctl+0xfc/0x170 [ 276.216086][ T9425] do_syscall_64+0xfa/0x3b0 [ 276.216108][ T9425] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.216129][ T9425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.216148][ T9425] ? clear_bhb_loop+0x60/0xb0 [ 276.216170][ T9425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.216187][ T9425] RIP: 0033:0x7fb2b792ebe9 [ 276.216210][ T9425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.216224][ T9425] RSP: 002b:00007fb2b5b96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 276.216243][ T9425] RAX: ffffffffffffffda RBX: 00007fb2b7b55fa0 RCX: 00007fb2b792ebe9 [ 276.216267][ T9425] RDX: 0000200000000240 RSI: 00000000c0145608 RDI: 0000000000000003 [ 276.216279][ T9425] RBP: 00007fb2b79b1e19 R08: 0000000000000000 R09: 0000000000000000 [ 276.216290][ T9425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.216301][ T9425] R13: 00007fb2b7b56038 R14: 00007fb2b7b55fa0 R15: 00007ffcb6ef6498 [ 276.216332][ T9425] [ 276.229200][ T9425] Mem-Info: [ 276.229222][ T9425] active_anon:271 inactive_anon:5945 isolated_anon:0 [ 276.229222][ T9425] active_file:13658 inactive_file:41103 isolated_file:0 [ 276.229222][ T9425] unevictable:768 dirty:295 writeback:0 [ 276.229222][ T9425] slab_reclaimable:11971 slab_unreclaimable:104588 [ 276.229222][ T9425] mapped:29255 shmem:2382 pagetables:1282 [ 276.229222][ T9425] sec_pagetables:0 bounce:0 [ 276.229222][ T9425] kernel_misc_reclaimable:0 [ 276.229222][ T9425] free:1305642 free_pcp:7264 free_cma:0 [ 276.229280][ T9425] Node 0 active_anon:1084kB inactive_anon:23780kB active_file:54432kB inactive_file:164408kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117020kB dirty:1180kB writeback:0kB shmem:7992kB kernel_stack:13092kB pagetables:4992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 276.229321][ T9425] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:80kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 276.229360][ T9425] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 276.229416][ T9425] lowmem_reserve[]: 0 2512 2513 2513 2513 [ 276.229448][ T9425] Node 0 DMA32 free:1308116kB boost:0kB min:3940kB low:6484kB high:9028kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1080kB inactive_anon:23736kB active_file:53416kB inactive_file:164340kB unevictable:1536kB writepending:1180kB present:3129332kB managed:2572332kB mlocked:0kB bounce:0kB free_pcp:29056kB local_pcp:15344kB free_cma:0kB [ 276.229501][ T9425] lowmem_reserve[]: 0 0 1 1 1 [ 276.229528][ T9425] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1016kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 276.229579][ T9425] lowmem_reserve[]: 0 0 0 0 0 [ 276.229607][ T9425] Node 1 Normal free:3899092kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:4kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 276.229658][ T9425] lowmem_reserve[]: 0 0 0 0 0 [ 276.229687][ T9425] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 276.232627][ T9425] Node 0 DMA32: 584*4kB (UME) 668*8kB (UME) 335*16kB (UM) 309*32kB (UME) 186*64kB (ME) 87*128kB (UME) 40*256kB (UME) 21*512kB (ME) 10*1024kB (UM) 11*2048kB (UM) 295*4096kB (UM) = 1308048kB [ 276.232774][ T9425] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 276.232864][ T9425] Node 1 Normal: 201*4kB (UE) 36*8kB (UME) 33*16kB (UME) 208*32kB (UME) 94*64kB (UME) 34*128kB (UME) 12*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3899092kB [ 276.233007][ T9425] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 276.233023][ T9425] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 276.233038][ T9425] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 276.233052][ T9425] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 276.233067][ T9425] 57139 total pagecache pages [ 276.233085][ T9425] 0 pages in swap cache [ 276.233091][ T9425] Free swap = 124996kB [ 276.233098][ T9425] Total swap = 124996kB [ 276.233105][ T9425] 2097051 pages RAM [ 276.233111][ T9425] 0 pages HighMem/MovableOnly [ 276.233118][ T9425] 422070 pages reserved [ 276.233124][ T9425] 0 pages cma reserved [ 277.265365][ T5905] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 277.415402][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 277.420806][ T5905] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 277.420836][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 277.420859][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 277.420878][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 277.420900][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 277.424154][ T5905] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 277.424182][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.424199][ T5905] usb 4-1: Product: syz [ 277.424221][ T5905] usb 4-1: Manufacturer: syz [ 277.424233][ T5905] usb 4-1: SerialNumber: syz [ 277.533730][ T9465] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 277.547953][ T5905] usb 4-1: config 0 descriptor?? [ 277.991865][ T5905] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 277.991926][ T5905] input input19: Device does not respond to id packet M [ 278.012109][ T5905] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 278.012163][ T5905] input input19: Device does not respond to id packet P [ 278.043361][ T5905] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 278.043412][ T5905] input input19: Device does not respond to id packet B [ 278.055953][ T5905] input input19: Device does not respond to id packet N [ 278.266305][ T5905] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 278.267730][ T5905] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 278.268209][ T5905] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 278.268697][ T5905] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 278.296685][ T9484] netlink: 'syz.1.1339': attribute type 12 has an invalid length. [ 278.296705][ T9484] netlink: 'syz.1.1339': attribute type 29 has an invalid length. [ 278.296717][ T9484] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1339'. [ 278.296745][ T9484] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1339'. [ 278.348493][ T5905] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input19 [ 278.382555][ T5905] usb 4-1: USB disconnect, device number 8 [ 279.371600][ T9516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1354'. [ 279.925331][ T5920] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 280.085379][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 280.088069][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.088099][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.088119][ T5920] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 280.088158][ T5920] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 280.088185][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.153252][ T5920] usb 5-1: config 0 descriptor?? [ 280.225401][ T5905] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 280.387737][ T5905] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 280.387763][ T5905] usb 3-1: config 0 has no interface number 0 [ 280.387804][ T5905] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 280.387816][ T5905] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 280.408057][ T5905] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 280.408085][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.408102][ T5905] usb 3-1: Product: syz [ 280.408113][ T5905] usb 3-1: Manufacturer: syz [ 280.408125][ T5905] usb 3-1: SerialNumber: syz [ 280.433312][ T5905] usb 3-1: config 0 descriptor?? [ 280.434344][ T9535] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 280.458780][ T5905] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 280.655721][ T5905] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 280.727296][ T5920] input: HID 0955:7214 Haptics as /devices/virtual/input/input20 [ 280.854263][ T5920] shield 0003:0955:7214.000D: Registered Thunderstrike controller [ 280.854633][ T5920] shield 0003:0955:7214.000D: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 280.995798][ T5930] usb 3-1: USB disconnect, device number 13 [ 281.025867][ T5920] usb 5-1: USB disconnect, device number 10 [ 281.034313][ T31] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 281.034699][ T31] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 281.034739][ T31] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 281.034777][ T31] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 281.149452][ T5930] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 281.151038][ T5930] cyberjack 3-1:0.69: device disconnected [ 283.215396][ T45] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 283.215579][ T5920] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 283.364221][ T37] audit: type=1326 audit(1756380292.814:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9600 comm="syz.1.1389" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb2b792ebe9 code=0x0 [ 283.369229][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 283.369310][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 283.369335][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 283.369358][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 283.369395][ T5920] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 283.369414][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.382742][ T5920] usb 1-1: config 0 descriptor?? [ 283.384002][ T9585] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 283.397934][ T45] usb 5-1: config index 0 descriptor too short (expected 72, got 10) [ 283.397957][ T45] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 283.397981][ T45] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 283.448184][ T45] usb 5-1: string descriptor 0 read error: -71 [ 283.448559][ T45] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 283.448635][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.481545][ T45] usb 5-1: can't set config #1, error -71 [ 283.493861][ T45] usb 5-1: USB disconnect, device number 11 [ 283.551841][ T9604] netlink: 'syz.3.1390': attribute type 2 has an invalid length. [ 283.551863][ T9604] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1390'. [ 283.822194][ T5920] plantronics 0003:047F:FFFF.000E: reserved main item tag 0xd [ 283.853072][ T5920] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 284.097218][ T9585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.097647][ T9585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.115630][ T5920] usb 1-1: USB disconnect, device number 15 [ 284.367720][ T9622] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 284.533924][ T37] audit: type=1326 audit(1756380293.984:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced44febe9 code=0x7fc00000 [ 284.781399][ T9632] loop2: detected capacity change from 0 to 7 [ 284.803097][ T9632] Dev loop2: unable to read RDB block 7 [ 284.803157][ T9632] loop2: unable to read partition table [ 284.803384][ T9632] loop2: partition table beyond EOD, truncated [ 284.803400][ T9632] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 285.183661][ T37] audit: type=1326 audit(1756380294.634:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fced44febe9 code=0x7fc00000 [ 285.183713][ T37] audit: type=1326 audit(1756380294.634:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced44febe9 code=0x7fc00000 [ 285.183753][ T37] audit: type=1326 audit(1756380294.634:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced44febe9 code=0x7fc00000 [ 285.183793][ T37] audit: type=1326 audit(1756380294.634:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced44febe9 code=0x7fc00000 [ 285.183829][ T37] audit: type=1326 audit(1756380294.634:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced44febe9 code=0x7fc00000 [ 285.183880][ T37] audit: type=1326 audit(1756380294.634:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced44febe9 code=0x7fc00000 [ 285.183918][ T37] audit: type=1326 audit(1756380294.634:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced44febe9 code=0x7fc00000 [ 285.183955][ T37] audit: type=1326 audit(1756380294.634:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9620 comm="syz.4.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fced44febe9 code=0x7fc00000 [ 285.870989][ T9659] overlayfs: failed to verify upper (275/file1, ino=1461, err=-116) [ 285.871029][ T9659] overlayfs: failed to verify index dir 'upper' xattr [ 285.871038][ T9659] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 285.896637][ T5920] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 286.051582][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 286.066487][ T5920] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 286.066542][ T5920] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 286.066559][ T5920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 286.066577][ T5920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 286.066595][ T5920] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 286.066628][ T5920] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 286.066647][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.339079][ T5920] usb 5-1: GET_CAPABILITIES returned 0 [ 286.339125][ T5920] usbtmc 5-1:16.0: can't read capabilities [ 286.441072][ T9674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1422'. [ 286.582512][ T5913] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 286.605836][ T5930] usb 5-1: USB disconnect, device number 12 [ 286.745409][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 286.748059][ T5913] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.748090][ T5913] usb 1-1: config 0 interface 0 has no altsetting 0 [ 286.748121][ T5913] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 286.748141][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.798248][ T5913] usb 1-1: config 0 descriptor?? [ 287.232409][ T5913] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 287.232481][ T5913] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 287.232506][ T5913] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 287.232529][ T5913] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 287.232553][ T5913] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 287.285957][ T5913] nzxt-smart2 0003:1E71:2009.000F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 287.474931][ T5920] usb 1-1: USB disconnect, device number 16 [ 287.795446][ T9706] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1436'. [ 287.917229][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f206400: rx timeout, send abort [ 287.917383][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f207800: rx timeout, send abort [ 287.917647][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f206400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 287.917781][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f207800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 288.154127][ T9715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1438'. [ 288.165254][ T9710] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1436'. [ 288.165282][ T9710] nbd: device at index 64 is going down [ 291.339985][ T37] kauditd_printk_skb: 58 callbacks suppressed [ 291.340003][ T37] audit: type=1326 audit(1756380300.794:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9782 comm="syz.3.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450eccebe9 code=0x7ffc0000 [ 291.340047][ T37] audit: type=1326 audit(1756380300.794:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9782 comm="syz.3.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450eccebe9 code=0x7ffc0000 [ 291.340338][ T37] audit: type=1326 audit(1756380300.794:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9782 comm="syz.3.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f450eccebe9 code=0x7ffc0000 [ 291.340721][ T37] audit: type=1326 audit(1756380300.794:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9782 comm="syz.3.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450eccebe9 code=0x7ffc0000 [ 291.340959][ T37] audit: type=1326 audit(1756380300.794:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9782 comm="syz.3.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450eccebe9 code=0x7ffc0000 [ 291.341609][ T37] audit: type=1326 audit(1756380300.794:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9782 comm="syz.3.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f450eccebe9 code=0x7ffc0000 [ 291.341857][ T37] audit: type=1326 audit(1756380300.794:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9782 comm="syz.3.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450eccebe9 code=0x7ffc0000 [ 291.349982][ T37] audit: type=1326 audit(1756380300.804:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9782 comm="syz.3.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450eccebe9 code=0x7ffc0000 [ 291.351812][ T37] audit: type=1326 audit(1756380300.804:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9782 comm="syz.3.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f450eccebe9 code=0x7ffc0000 [ 291.353621][ T37] audit: type=1326 audit(1756380300.804:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9782 comm="syz.3.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450eccebe9 code=0x7ffc0000 [ 291.650674][ T9791] netlink: 'syz.1.1470': attribute type 1 has an invalid length. [ 291.762584][ T9791] 8021q: adding VLAN 0 to HW filter on device bond1 [ 291.826553][ T9796] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 291.826553][ T9796] Q [ 292.009345][ T9794] 8021q: adding VLAN 0 to HW filter on device bond1 [ 292.009856][ T9794] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 292.011828][ T9794] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 292.262420][ T9811] syz_tun: entered allmulticast mode [ 292.278108][ T9810] syz_tun: left allmulticast mode [ 292.625343][ T5905] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 292.785360][ T5905] usb 5-1: Using ep0 maxpacket: 8 [ 292.793478][ T5905] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 292.793536][ T5905] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 292.793557][ T5905] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 292.793642][ T5905] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 292.793663][ T5905] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.793703][ T5905] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 292.793724][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.123680][ T5905] usb 5-1: usb_control_msg returned -32 [ 293.123726][ T5905] usbtmc 5-1:16.0: can't read capabilities [ 293.175484][ T5913] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 293.333334][ T5913] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 293.333362][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.333380][ T5913] usb 3-1: Product: syz [ 293.333392][ T5913] usb 3-1: Manufacturer: syz [ 293.333405][ T5913] usb 3-1: SerialNumber: syz [ 293.370713][ T5913] usb 3-1: config 0 descriptor?? [ 293.384887][ T5913] gspca_main: sq930x-2.14.0 probing 2770:930c [ 293.480581][ T5905] libceph: connect (1)[c::]:6789 error -101 [ 293.481045][ T5905] libceph: mon0 (1)[c::]:6789 connect error [ 293.483013][ T5905] libceph: connect (1)[c::]:6789 error -101 [ 293.483715][ T5905] libceph: mon0 (1)[c::]:6789 connect error [ 293.735911][ T5905] libceph: connect (1)[c::]:6789 error -101 [ 293.736302][ T5905] libceph: mon0 (1)[c::]:6789 connect error [ 294.246519][ T5905] libceph: connect (1)[c::]:6789 error -101 [ 294.247022][ T5905] libceph: mon0 (1)[c::]:6789 connect error [ 294.260024][ T9846] ceph: No mds server is up or the cluster is laggy [ 294.625312][ T5913] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 294.845337][ T5913] gspca_sq930x: Sensor ov9630 not yet treated [ 294.845438][ T5913] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 294.851355][ T5913] usb 3-1: USB disconnect, device number 14 [ 295.475969][ T5905] usb 5-1: USB disconnect, device number 13 [ 295.956447][ T5905] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 296.113737][ T5905] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.113762][ T5905] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 296.134655][ T5905] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 296.134682][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 296.134699][ T5905] usb 5-1: SerialNumber: syz [ 296.441750][ T5905] usb 5-1: 0:2 : does not exist [ 296.485593][ T5905] usb 5-1: USB disconnect, device number 14 [ 297.307682][ T9929] capability: warning: `syz.4.1532' uses 32-bit capabilities (legacy support in use) [ 297.790703][ T9939] netlink: 'syz.1.1537': attribute type 12 has an invalid length. [ 297.790724][ T9939] netlink: 'syz.1.1537': attribute type 29 has an invalid length. [ 297.790737][ T9939] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1537'. [ 297.790765][ T9939] netlink: 'syz.1.1537': attribute type 3 has an invalid length. [ 297.790777][ T9939] netlink: 'syz.1.1537': attribute type 2 has an invalid length. [ 297.790789][ T9939] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1537'. [ 298.061130][ T5905] libceph: connect (1)[c::]:6789 error -101 [ 298.061357][ T5905] libceph: mon0 (1)[c::]:6789 connect error [ 298.061850][ T5905] libceph: connect (1)[c::]:6789 error -101 [ 298.062037][ T5905] libceph: mon0 (1)[c::]:6789 connect error [ 298.315701][ T9] libceph: connect (1)[c::]:6789 error -101 [ 298.315926][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 298.825948][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 298.826167][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 298.830098][ T9945] ceph: No mds server is up or the cluster is laggy [ 299.204713][ T9979] netlink: 'syz.4.1552': attribute type 9 has an invalid length. [ 299.204736][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1552'. [ 299.208991][ T9979] netlink: 'syz.4.1552': attribute type 9 has an invalid length. [ 299.209011][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1552'. [ 300.905448][ T5913] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 301.055337][ T5913] usb 3-1: Using ep0 maxpacket: 32 [ 301.057684][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.057713][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.057748][ T5913] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 301.057769][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.062886][ T5913] usb 3-1: config 0 descriptor?? [ 301.550580][ T5913] savu 0003:1E7D:2D5A.0010: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 301.608666][T10040] smc: net device bond0 applied user defined pnetid SYZ2 [ 301.614302][T10040] smc: net device bond0 erased user defined pnetid SYZ2 [ 301.845670][ T5913] usb 3-1: USB disconnect, device number 15 [ 304.151971][T10111] use of bytesused == 0 is deprecated and will be removed in the future, [ 304.151981][T10111] use the actual size instead. [ 304.585441][ T991] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 304.746242][ T991] usb 4-1: Using ep0 maxpacket: 16 [ 304.750868][ T991] usb 4-1: config 6 has an invalid interface number: 43 but max is 0 [ 304.750892][ T991] usb 4-1: config 6 has no interface number 0 [ 304.750940][ T991] usb 4-1: config 6 interface 43 altsetting 170 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 304.750965][ T991] usb 4-1: config 6 interface 43 has no altsetting 0 [ 304.766136][ T991] usb 4-1: string descriptor 0 read error: -71 [ 304.766371][ T991] usb 4-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 304.766392][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.772753][ T5930] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 304.831737][ T991] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 304.831760][ T991] usb 4-1: no configuration chosen from 1 choice [ 304.834186][ T991] usb 4-1: USB disconnect, device number 9 [ 304.931548][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.931577][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.931595][ T5930] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 304.931634][ T5930] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 304.931655][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.945677][ T5930] usb 2-1: config 0 descriptor?? [ 305.444033][ T5930] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 305.633380][T10134] veth0: entered promiscuous mode [ 305.691088][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1620'. [ 306.738971][ T991] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 306.870861][ T31] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 306.887873][ T991] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.887898][ T991] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 306.887946][ T991] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 306.887966][ T991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.933877][ T991] usb 1-1: config 0 descriptor?? [ 306.944209][ T991] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 306.944480][ T991] dvb-usb: bulk message failed: -22 (3/0) [ 306.961261][ T31] hid-generic 0000:0000:0000.0012: hidraw1: HID v0.00 Device [syz1] on syz0 [ 306.980976][ T991] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 306.981913][ T991] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 306.981969][ T991] usb 1-1: media controller created [ 307.006143][ T991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 307.026736][ T991] dvb-usb: bulk message failed: -22 (6/0) [ 307.026853][ T991] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 307.058745][ T991] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input22 [ 307.061467][ T991] dvb-usb: schedule remote query interval to 150 msecs. [ 307.061485][ T991] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 307.220101][ T991] dvb-usb: bulk message failed: -22 (1/0) [ 307.220136][ T991] dvb-usb: error while querying for an remote control event. [ 307.375753][ T991] dvb-usb: bulk message failed: -22 (1/0) [ 307.375786][ T991] dvb-usb: error while querying for an remote control event. [ 307.478520][ T45] usb 2-1: USB disconnect, device number 9 [ 307.535334][ T5920] dvb-usb: bulk message failed: -22 (1/0) [ 307.535367][ T5920] dvb-usb: error while querying for an remote control event. [ 307.695354][ T45] dvb-usb: bulk message failed: -22 (1/0) [ 307.695388][ T45] dvb-usb: error while querying for an remote control event. [ 307.824224][ T9] usb 1-1: USB disconnect, device number 17 [ 308.040390][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 308.685383][ T45] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 308.845117][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 308.851836][ T45] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 308.853448][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.858776][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.860204][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.861493][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.867848][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.869475][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.874885][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.875419][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 308.885309][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.925304][ T45] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 308.925332][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 308.925350][ T45] usb 5-1: SerialNumber: syz [ 308.983943][ T45] usb 5-1: config 0 descriptor?? [ 309.013066][ T45] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input23 [ 309.055358][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 309.061321][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.061352][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 309.061391][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 309.061411][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.082681][ T9] usb 1-1: config 0 descriptor?? [ 309.266235][ T5195] bcm5974 5-1:0.0: could not read from device [ 309.305785][ T45] usb 5-1: USB disconnect, device number 15 [ 309.541282][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 309.549322][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0013/input/input24 [ 309.594044][ T9] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 310.233245][T10227] loop2: detected capacity change from 0 to 7 [ 310.255832][T10227] Dev loop2: unable to read RDB block 7 [ 310.255942][T10227] loop2: unable to read partition table [ 310.256295][T10227] loop2: partition table beyond EOD, truncated [ 310.256312][T10227] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 310.352808][ T37] kauditd_printk_skb: 197 callbacks suppressed [ 310.352826][ T37] audit: type=1326 audit(1756380320.811:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10222 comm="syz.1.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b792ebe9 code=0x7ffc0000 [ 310.353413][ T37] audit: type=1326 audit(1756380320.811:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10222 comm="syz.1.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb2b78cade9 code=0x7ffc0000 [ 310.354128][ T37] audit: type=1326 audit(1756380320.811:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10222 comm="syz.1.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b792ebe9 code=0x7ffc0000 [ 310.354805][ T37] audit: type=1326 audit(1756380320.811:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10222 comm="syz.1.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b792ebe9 code=0x7ffc0000 [ 310.369307][ T45] usb 1-1: USB disconnect, device number 18 [ 310.462397][ T37] audit: type=1326 audit(1756380320.921:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10222 comm="syz.1.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb2b78cade9 code=0x7ffc0000 [ 310.508786][ T37] audit: type=1326 audit(1756380320.971:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10222 comm="syz.1.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb2b78cade9 code=0x7ffc0000 [ 310.509191][ T37] audit: type=1326 audit(1756380320.971:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10222 comm="syz.1.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b792ebe9 code=0x7ffc0000 [ 310.509649][ T37] audit: type=1326 audit(1756380320.971:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10222 comm="syz.1.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b792ebe9 code=0x7ffc0000 [ 310.510547][ T37] audit: type=1326 audit(1756380320.971:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10222 comm="syz.1.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb2b78cade9 code=0x7ffc0000 [ 310.511037][ T37] audit: type=1326 audit(1756380320.971:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10222 comm="syz.1.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb2b792ebe9 code=0x7ffc0000 [ 310.915350][ T991] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 311.015334][ T5920] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 311.087286][ T991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.087316][ T991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.087353][ T991] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 311.087373][ T991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.166426][ T991] usb 3-1: config 0 descriptor?? [ 311.219570][ T5920] usb 2-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 311.219599][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.246614][ T5920] usb 2-1: config 0 descriptor?? [ 311.707158][ T991] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0 [ 311.707285][ T991] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0 [ 311.711930][ T991] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0014/input/input25 [ 311.775687][ T991] cm6533_jd 0003:0D8C:0022.0014: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 311.908315][ T5930] usb 2-1: USB disconnect, device number 10 [ 311.941593][ T9] usb 3-1: USB disconnect, device number 16 [ 312.098755][ T5913] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 312.245296][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 312.248694][ T5913] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 312.248768][ T5913] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 312.248789][ T5913] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 312.248811][ T5913] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 312.248832][ T5913] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.248878][ T5913] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 312.248898][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.484117][ T5913] usb 4-1: GET_CAPABILITIES returned 0 [ 312.484165][ T5913] usbtmc 4-1:16.0: can't read capabilities [ 312.762297][ T5913] usb 4-1: USB disconnect, device number 10 [ 312.786200][ T5920] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 312.935281][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 312.937727][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 312.937773][ T5920] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 312.937794][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.984383][ T5920] usb 5-1: config 0 descriptor?? [ 313.237660][ T5920] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 313.617005][T10301] Invalid ELF header magic: != ELF [ 313.646079][ T5920] usb 5-1: USB disconnect, device number 16 [ 313.688912][T10303] GUP no longer grows the stack in syz.3.1687 (10303): 200000004000-200000008000 (200000002000) [ 313.688948][T10303] CPU: 0 UID: 0 PID: 10303 Comm: syz.3.1687 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.688969][T10303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 313.688993][T10303] Call Trace: [ 313.689000][T10303] [ 313.689009][T10303] dump_stack_lvl+0x189/0x250 [ 313.689042][T10303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.689067][T10303] ? __pfx__printk+0x10/0x10 [ 313.689084][T10303] ? find_vma+0xe7/0x160 [ 313.689120][T10303] __get_user_pages+0x237e/0x2b60 [ 313.689180][T10303] get_user_pages_remote+0x2f1/0xad0 [ 313.689203][T10303] ? __pfx_mtree_load+0x10/0x10 [ 313.689230][T10303] ? __pfx_get_user_pages_remote+0x10/0x10 [ 313.689257][T10303] ? __access_remote_vm+0x367/0x7d0 [ 313.689291][T10303] __access_remote_vm+0x211/0x7d0 [ 313.689325][T10303] ? __pfx___access_remote_vm+0x10/0x10 [ 313.689348][T10303] ? set_page_refcounted+0xa0/0x1e0 [ 313.689373][T10303] ? alloc_pages_noprof+0xe4/0x1e0 [ 313.689400][T10303] proc_pid_cmdline_read+0x433/0x810 [ 313.689423][T10303] ? __asan_memset+0x22/0x50 [ 313.689450][T10303] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 313.689477][T10303] ? rw_verify_area+0x2ac/0x4e0 [ 313.689500][T10303] vfs_readv+0x5b3/0x850 [ 313.689524][T10303] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 313.689548][T10303] ? __pfx_vfs_readv+0x10/0x10 [ 313.689583][T10303] ? __fget_files+0x2a/0x420 [ 313.689610][T10303] ? __fget_files+0x3a6/0x420 [ 313.689629][T10303] ? __fget_files+0x2a/0x420 [ 313.689656][T10303] __x64_sys_preadv+0x19a/0x2a0 [ 313.689677][T10303] ? __pfx___x64_sys_preadv+0x10/0x10 [ 313.689696][T10303] ? rcu_is_watching+0x15/0xb0 [ 313.689735][T10303] ? do_syscall_64+0xbe/0x3b0 [ 313.689761][T10303] do_syscall_64+0xfa/0x3b0 [ 313.689781][T10303] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.689801][T10303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.689817][T10303] ? clear_bhb_loop+0x60/0xb0 [ 313.689838][T10303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.689852][T10303] RIP: 0033:0x7f450eccebe9 [ 313.689868][T10303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.689881][T10303] RSP: 002b:00007f450cf36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 313.689900][T10303] RAX: ffffffffffffffda RBX: 00007f450eef5fa0 RCX: 00007f450eccebe9 [ 313.689914][T10303] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000003 [ 313.689925][T10303] RBP: 00007f450ed51e19 R08: 0000000000000200 R09: 0000000000000000 [ 313.689937][T10303] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 313.689948][T10303] R13: 00007f450eef6038 R14: 00007f450eef5fa0 R15: 00007ffd519a17a8 [ 313.689976][T10303] [ 313.831818][T10307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1691'. [ 314.906080][T10330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1700'. [ 316.757272][T10386] evm: overlay not supported [ 316.897304][ T37] kauditd_printk_skb: 42 callbacks suppressed [ 316.897320][ T37] audit: type=1326 audit(1756380327.361:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10391 comm="syz.2.1725" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d2ae9ebe9 code=0x0 [ 316.989395][ T37] audit: type=1326 audit(1756380327.451:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10394 comm="syz.1.1726" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2b792ebe9 code=0x0 [ 317.234175][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.234243][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.878988][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1733'. [ 317.879008][T10416] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1733'. [ 317.879352][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1733'. [ 318.005313][ T5920] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 318.177936][ T5920] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 318.177961][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.177976][ T5920] usb 5-1: Product: syz [ 318.177987][ T5920] usb 5-1: Manufacturer: syz [ 318.177998][ T5920] usb 5-1: SerialNumber: syz [ 318.224705][ T5920] usb 5-1: config 0 descriptor?? [ 318.395600][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 318.479734][ T5930] usb 5-1: USB disconnect, device number 17 [ 318.555335][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 318.569804][ T9] usb 1-1: config 0 has an invalid interface number: 79 but max is 0 [ 318.569831][ T9] usb 1-1: config 0 has no interface number 0 [ 318.589485][ T9] usb 1-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 6.76 [ 318.589513][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.589532][ T9] usb 1-1: Product: syz [ 318.589544][ T9] usb 1-1: Manufacturer: syz [ 318.589556][ T9] usb 1-1: SerialNumber: syz [ 318.631197][ T9] usb 1-1: config 0 descriptor?? [ 318.640856][ T9] hub 1-1:0.79: bad descriptor, ignoring hub [ 318.640896][ T9] hub 1-1:0.79: probe with driver hub failed with error -5 [ 318.642260][ T9] ftdi_sio 1-1:0.79: FTDI USB Serial Device converter detected [ 318.643929][ T9] ftdi_sio ttyUSB0: unknown device type: 0x676 [ 318.842465][T10430] sctp: [Deprecated]: syz.1.1737 (pid 10430) Use of struct sctp_assoc_value in delayed_ack socket option. [ 318.842465][T10430] Use struct sctp_sack_info instead [ 318.965802][ T5905] usb 1-1: USB disconnect, device number 19 [ 318.968332][ T5905] ftdi_sio 1-1:0.79: device disconnected [ 319.675787][T10456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1748'. [ 319.676013][T10456] macvlan1: entered allmulticast mode [ 319.676030][T10456] veth1_vlan: entered allmulticast mode [ 320.301972][T10474] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1752'. [ 321.032137][T10486] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 321.032172][T10486] overlayfs: failed to set xattr on upper [ 321.032180][T10486] overlayfs: ...falling back to redirect_dir=nofollow. [ 321.032188][T10486] overlayfs: ...falling back to uuid=null. [ 321.448571][T10502] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1765'. [ 321.448607][T10502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1765'. [ 321.449700][T10502] netlink: 'syz.1.1765': attribute type 10 has an invalid length. [ 321.450942][T10502] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.457085][T10502] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.516078][T10502] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.519290][T10502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.520701][T10502] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.520888][T10502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.539140][T10502] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 322.350452][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.537012][ T37] audit: type=1326 audit(1756380333.001:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10535 comm="syz.0.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea552ebe9 code=0x7ffc0000 [ 322.537357][ T37] audit: type=1326 audit(1756380333.001:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10535 comm="syz.0.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fcea552ebe9 code=0x7ffc0000 [ 322.546033][ T37] audit: type=1326 audit(1756380333.001:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10535 comm="syz.0.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea552ebe9 code=0x7ffc0000 [ 322.549236][ T37] audit: type=1326 audit(1756380333.011:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10535 comm="syz.0.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fcea552ebe9 code=0x7ffc0000 [ 322.555647][ T37] audit: type=1326 audit(1756380333.011:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10535 comm="syz.0.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea552ebe9 code=0x7ffc0000 [ 322.556210][ T37] audit: type=1326 audit(1756380333.021:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10535 comm="syz.0.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea552ebe9 code=0x7ffc0000 [ 323.245463][ T9] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 323.333562][T10568] binder: 10566:10568 ioctl c0306201 200000000640 returned -22 [ 323.414281][ T9] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 323.414309][ T9] usb 2-1: config 0 has no interface number 0 [ 323.418391][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 323.418418][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.418435][ T9] usb 2-1: Product: syz [ 323.418447][ T9] usb 2-1: Manufacturer: syz [ 323.418459][ T9] usb 2-1: SerialNumber: syz [ 323.423825][ T9] usb 2-1: config 0 descriptor?? [ 323.696703][ T9] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 323.722615][ T9] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 323.722721][ T9] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 323.722958][ T9] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 323.746397][ T9] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 323.757280][ T9] usb 2-1: USB disconnect, device number 11 [ 323.783984][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 323.851030][ T9] keyspan 2-1:0.133: device disconnected [ 324.107857][T10580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1797'. [ 324.330172][T10585] input: syz1 as /devices/virtual/input/input26 [ 324.372583][T10580] bond2: (slave vxcan1): Releasing backup interface [ 324.373710][T10580] vxcan1 (unregistering): left promiscuous mode [ 324.413627][T10580] bond2: Destroying bond [ 324.575506][ T5920] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 324.787520][ T5920] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.787545][ T5920] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 324.788790][ T5920] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 324.788815][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 324.788833][ T5920] usb 1-1: SerialNumber: syz [ 325.072692][ T5920] usb 1-1: 0:2 : does not exist [ 325.581962][ T5920] usb 1-1: USB disconnect, device number 20 [ 326.221029][T10580] bond2 (unregistering): Released all slaves [ 326.454186][T10604] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 326.454212][T10604] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 326.524000][T10612] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 326.524034][T10612] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 326.524046][T10612] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 326.883516][T10621] netlink: 'syz.1.1812': attribute type 10 has an invalid length. [ 326.931915][T10621] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.935100][T10621] bond0: (slave team0): Enslaving as an active interface with an up link [ 326.935733][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 327.097563][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.097594][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.097629][ T9] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 327.097651][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.104837][ T9] usb 5-1: config 0 descriptor?? [ 328.361248][ T9] uclogic 0003:256C:006D.0016: interface is invalid, ignoring [ 328.374827][ T9] usb 5-1: USB disconnect, device number 18 [ 328.679437][T10623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.812476][T10623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.910041][T10623] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 329.040479][T10623] bond0 (unregistering): Released all slaves [ 329.137466][T10646] pimreg: entered allmulticast mode [ 329.139706][T10647] pimreg: left allmulticast mode [ 329.195397][ T5920] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 329.345309][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 329.348215][ T5920] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 329.348240][ T5920] usb 5-1: config 0 has no interface number 0 [ 329.348293][ T5920] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 329.348315][ T5920] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 329.348336][ T5920] usb 5-1: config 0 interface 41 has no altsetting 0 [ 329.350518][ T5920] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 329.350544][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.350562][ T5920] usb 5-1: Product: syz [ 329.350574][ T5920] usb 5-1: Manufacturer: syz [ 329.350588][ T5920] usb 5-1: SerialNumber: syz [ 329.433832][ T5920] usb 5-1: config 0 descriptor?? [ 329.434944][T10653] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 329.447642][T10653] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 329.666062][T10653] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 329.666182][T10653] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 330.070566][ T5920] Error reading MAC address [ 330.073447][T10653] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 330.073564][T10653] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 330.809767][ T5920] sr9700 5-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.4-1, CoreChip SR9700 USB Ethernet, 2a:e7:5d:28:e1:7c [ 330.829699][ T5920] usb 5-1: USB disconnect, device number 19 [ 330.833372][ T5920] sr9700 5-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.4-1, CoreChip SR9700 USB Ethernet [ 330.895324][ T5929] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 331.063829][ T5929] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.063870][ T5929] usb 2-1: config 0 interface 0 has no altsetting 0 [ 331.068559][ T5929] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 331.068586][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.068605][ T5929] usb 2-1: Product: syz [ 331.068617][ T5929] usb 2-1: Manufacturer: syz [ 331.068630][ T5929] usb 2-1: SerialNumber: syz [ 331.121968][ T5929] usb 2-1: config 0 descriptor?? [ 331.142718][ T5929] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 331.167969][ T5929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 331.170275][ T5929] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 331.170323][ T5929] usb 2-1: media controller created [ 331.236649][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 331.334907][ T5929] DVB: Unable to find symbol tda10046_attach() [ 331.334923][ T5929] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 331.334936][ T5929] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 332.381252][ T5929] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 332.399274][ T5929] usb 2-1: USB disconnect, device number 12 [ 332.619440][T10718] kvm: user requested TSC rate below hardware speed [ 334.113630][T10752] Invalid ELF header magic: != ELF [ 334.579683][ T9] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 334.613241][T10763] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 334.613274][T10763] overlayfs: failed to set xattr on upper [ 334.613282][T10763] overlayfs: ...falling back to redirect_dir=nofollow. [ 334.613289][T10763] overlayfs: ...falling back to index=off. [ 334.613296][T10763] overlayfs: ...falling back to uuid=null. [ 334.613303][T10763] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 334.613321][T10763] overlayfs: maximum fs stacking depth exceeded [ 334.614038][ T9] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz0 [ 335.283015][ T9] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 335.498074][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 335.498105][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 335.498141][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 335.523011][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 335.523048][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.523066][ T9] usb 3-1: Product: syz [ 335.523079][ T9] usb 3-1: Manufacturer: syz [ 335.523091][ T9] usb 3-1: SerialNumber: syz [ 336.009895][T10790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1878'. [ 336.025707][ T9] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 336.040667][T10790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.309298][T10790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.828427][ T9] usb 3-1: 2:1: cannot get freq at ep 0x82 [ 337.044049][ T9] usb 3-1: USB disconnect, device number 17 [ 337.115340][ T45] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 337.265393][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 337.268544][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 337.274108][ T45] usb 2-1: config 8 has an invalid interface number: 255 but max is 0 [ 337.274132][ T45] usb 2-1: config 8 has no interface number 0 [ 337.274163][ T45] usb 2-1: config 8 interface 255 has no altsetting 0 [ 337.298809][ T45] usb 2-1: string descriptor 0 read error: -22 [ 337.298966][ T45] usb 2-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 337.298987][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.492697][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 337.525546][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 337.527935][ T45] catc 2-1:8.255: Can't set altsetting 1. [ 337.527993][ T45] catc 2-1:8.255: probe with driver catc failed with error -5 [ 337.532039][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 337.533756][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 337.535082][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.558069][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 337.558614][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 337.558992][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 337.560101][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 337.560853][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.635447][ T45] usb 2-1: USB disconnect, device number 13 [ 338.269036][T10803] chnl_net:caif_netlink_parms(): no params data found [ 338.812904][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1895'. [ 339.007350][T10803] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.007530][T10803] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.007736][T10803] bridge_slave_0: entered allmulticast mode [ 339.010407][T10803] bridge_slave_0: entered promiscuous mode [ 339.024231][T10803] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.045516][T10803] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.045770][T10803] bridge_slave_1: entered allmulticast mode [ 339.048436][T10803] bridge_slave_1: entered promiscuous mode [ 339.500202][T10803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.516396][T10803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.625917][ T5850] Bluetooth: hci2: command tx timeout [ 339.754015][T10803] team0: Port device team_slave_0 added [ 339.774066][T10803] team0: Port device team_slave_1 added [ 339.841387][ T37] audit: type=1326 audit(1756380350.301:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10849 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b792ebe9 code=0x7ffc0000 [ 339.841756][ T37] audit: type=1326 audit(1756380350.301:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10849 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2b792ebe9 code=0x7ffc0000 [ 339.843956][ T37] audit: type=1326 audit(1756380350.301:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10849 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b792ebe9 code=0x7ffc0000 [ 339.844589][ T37] audit: type=1326 audit(1756380350.301:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10849 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2b792ebe9 code=0x7ffc0000 [ 339.846402][ T37] audit: type=1326 audit(1756380350.301:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10849 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b792ebe9 code=0x7ffc0000 [ 339.846845][ T37] audit: type=1326 audit(1756380350.311:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10849 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb2b792ebe9 code=0x7ffc0000 [ 339.847099][ T37] audit: type=1326 audit(1756380350.311:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10849 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b792ebe9 code=0x7ffc0000 [ 340.045149][T10803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.045254][T10803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.045279][T10803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.048026][T10803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.048039][T10803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.048063][T10803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.322769][T10803] hsr_slave_0: entered promiscuous mode [ 340.324122][T10803] hsr_slave_1: entered promiscuous mode [ 340.325095][T10803] debugfs: 'hsr0' already exists in 'hsr' [ 340.325119][T10803] Cannot create hsr debugfs directory [ 340.718667][T10869] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1907'. [ 341.708575][ T5850] Bluetooth: hci2: command tx timeout [ 342.538824][T10803] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 342.571139][T10803] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 342.621210][T10803] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 342.667028][T10803] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 343.043226][T10803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.091893][T10803] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.128346][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.128550][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.178108][ T6195] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.178264][ T6195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.462471][T10803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 343.791685][ T5850] Bluetooth: hci2: command tx timeout [ 344.253212][T10803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.100179][T10803] veth0_vlan: entered promiscuous mode [ 345.128586][T10803] veth1_vlan: entered promiscuous mode [ 345.291882][T10803] veth0_macvtap: entered promiscuous mode [ 345.313755][T10803] veth1_macvtap: entered promiscuous mode [ 345.384377][T10803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.431860][T10803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.454771][ T1326] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.455129][ T1326] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.460581][ T1326] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.460681][ T1326] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.865622][ T5850] Bluetooth: hci2: command tx timeout [ 346.697044][ T4557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.697062][ T4557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.850733][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.850752][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.680037][T11013] trusted_key: syz.2.1957 sent an empty control message without MSG_MORE. [ 349.035393][ T5920] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 349.183658][T11055] sg_read: process 933 (syz.0.1974) changed security contexts after opening file descriptor, this is not allowed. [ 349.202576][ T5920] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.202600][ T5920] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 349.226913][ T5920] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 349.226942][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.226959][ T5920] usb 4-1: Product: syz [ 349.226971][ T5920] usb 4-1: Manufacturer: syz [ 349.226984][ T5920] usb 4-1: SerialNumber: syz [ 349.395642][ T5905] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 349.485966][ T5920] usb 4-1: 0:2 : does not exist [ 349.492387][ T5920] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 349.545459][ T5930] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 349.577694][ T5920] usb 4-1: USB disconnect, device number 11 [ 349.586857][ T5905] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 349.586885][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.586903][ T5905] usb 2-1: Product: syz [ 349.586915][ T5905] usb 2-1: Manufacturer: syz [ 349.586928][ T5905] usb 2-1: SerialNumber: syz [ 349.618662][ T5905] usb 2-1: config 0 descriptor?? [ 349.643345][ T5905] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 349.705588][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 349.709318][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.709349][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.709369][ T5930] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 349.709461][ T5930] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 349.709481][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.769812][ T5930] usb 3-1: config 0 descriptor?? [ 350.280349][ T5930] hid-multitouch 0003:0457:07DA.0018: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0 [ 350.527859][ T9] usb 3-1: USB disconnect, device number 18 [ 350.855414][ T5920] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 351.005507][ T5920] usb 6-1: Using ep0 maxpacket: 16 [ 351.008848][ T5920] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 351.008879][ T5920] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 351.008901][ T5920] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 351.010484][ T5920] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 351.010510][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 351.010563][ T5920] usb 6-1: SerialNumber: syz [ 351.054360][T11073] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 351.086778][ T5905] gspca_sunplus: reg_r err -71 [ 351.086900][ T5905] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 351.110006][ T5905] usb 2-1: USB disconnect, device number 14 [ 351.621251][ T5920] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 351.643929][ T5920] usb 6-1: USB disconnect, device number 2 [ 352.406822][T11100] netlink: 'syz.2.1991': attribute type 10 has an invalid length. [ 352.432052][T11100] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.433932][T11100] bridge_slave_1: left allmulticast mode [ 352.433961][T11100] bridge_slave_1: left promiscuous mode [ 352.435035][T11100] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.598433][T11100] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 352.779570][ T37] audit: type=1326 audit(1756380363.241:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11107 comm="syz.0.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea552ebe9 code=0x7ffc0000 [ 352.779625][ T37] audit: type=1326 audit(1756380363.241:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11107 comm="syz.0.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea552ebe9 code=0x7ffc0000 [ 352.780153][ T37] audit: type=1326 audit(1756380363.241:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11107 comm="syz.0.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcea552ebe9 code=0x7ffc0000 [ 352.780197][ T37] audit: type=1326 audit(1756380363.241:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11107 comm="syz.0.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea552ebe9 code=0x7ffc0000 [ 352.780235][ T37] audit: type=1326 audit(1756380363.241:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11107 comm="syz.0.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea552ebe9 code=0x7ffc0000 [ 352.780826][ T37] audit: type=1326 audit(1756380363.241:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11107 comm="syz.0.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fcea552ebe9 code=0x7ffc0000 [ 352.782295][ T37] audit: type=1326 audit(1756380363.241:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11107 comm="syz.0.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea552ebe9 code=0x7ffc0000 [ 352.782461][ T37] audit: type=1326 audit(1756380363.241:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11107 comm="syz.0.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea552ebe9 code=0x7ffc0000 [ 352.782637][ T37] audit: type=1326 audit(1756380363.241:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11107 comm="syz.0.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea552ebe9 code=0x7ffc0000 [ 352.782828][ T37] audit: type=1326 audit(1756380363.241:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11107 comm="syz.0.1995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea552ebe9 code=0x7ffc0000 [ 354.426193][ C1] ------------[ cut here ]------------ [ 354.426214][ C1] WARNING: CPU: 1 PID: 29 at ./include/linux/seqlock.h:221 est_timer+0x6dc/0x9f0 [ 354.426253][ C1] Modules linked in: [ 354.426272][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 354.426297][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 354.426310][ C1] RIP: 0010:est_timer+0x6dc/0x9f0 [ 354.426333][ C1] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 7d 35 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 95 fd e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 354.426351][ C1] RSP: 0018:ffffc90000a3f7a0 EFLAGS: 00010246 [ 354.426368][ C1] RAX: ffffffff88dc5ebb RBX: 0000000000000001 RCX: ffff88801ca89dc0 [ 354.426384][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 354.426399][ C1] RBP: ffffc90000a3f8b0 R08: 0000000000000000 R09: 0000000000000100 [ 354.426413][ C1] R10: dffffc0000000000 R11: fffff52000147f0a R12: 0000000000000008 [ 354.426429][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880378a2268 [ 354.426444][ C1] FS: 0000000000000000(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 354.426463][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 354.426478][ C1] CR2: 00007fb2b86856c0 CR3: 000000006169a000 CR4: 00000000003526f0 [ 354.426497][ C1] Call Trace: [ 354.426505][ C1] [ 354.426533][ C1] ? __pfx_est_timer+0x10/0x10 [ 354.426571][ C1] call_timer_fn+0x17b/0x5f0 [ 354.426599][ C1] ? __pfx_est_timer+0x10/0x10 [ 354.426626][ C1] ? call_timer_fn+0xbe/0x5f0 [ 354.426653][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 354.426692][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.426720][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.426744][ C1] ? __pfx_est_timer+0x10/0x10 [ 354.426769][ C1] __run_timer_base+0x648/0x970 [ 354.426814][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 354.426862][ C1] run_timer_softirq+0xb7/0x180 [ 354.426888][ C1] handle_softirqs+0x22c/0x710 [ 354.426928][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 354.426968][ C1] run_ktimerd+0xcf/0x190 [ 354.426997][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 354.427022][ C1] ? schedule+0x91/0x360 [ 354.427057][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 354.427082][ C1] smpboot_thread_fn+0x542/0xa60 [ 354.427109][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 354.427147][ C1] kthread+0x711/0x8a0 [ 354.427181][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 354.427207][ C1] ? __pfx_kthread+0x10/0x10 [ 354.427244][ C1] ? __pfx_kthread+0x10/0x10 [ 354.427276][ C1] ret_from_fork+0x3fc/0x770 [ 354.427307][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 354.427342][ C1] ? __switch_to_asm+0x39/0x70 [ 354.427362][ C1] ? __switch_to_asm+0x33/0x70 [ 354.427381][ C1] ? __pfx_kthread+0x10/0x10 [ 354.427413][ C1] ret_from_fork_asm+0x1a/0x30 [ 354.427454][ C1] [ 354.427465][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 354.427480][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 354.427505][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 354.427518][ C1] Call Trace: [ 354.427525][ C1] [ 354.427534][ C1] dump_stack_lvl+0x99/0x250 [ 354.427564][ C1] ? __asan_memcpy+0x40/0x70 [ 354.427587][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.427622][ C1] ? __pfx__printk+0x10/0x10 [ 354.427662][ C1] vpanic+0x281/0x750 [ 354.427693][ C1] ? __pfx__printk+0x10/0x10 [ 354.427715][ C1] ? __pfx_vpanic+0x10/0x10 [ 354.427745][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 354.427787][ C1] panic+0xb9/0xc0 [ 354.427816][ C1] ? __pfx_panic+0x10/0x10 [ 354.427865][ C1] __warn+0x31b/0x4b0 [ 354.427892][ C1] ? est_timer+0x6dc/0x9f0 [ 354.427918][ C1] ? est_timer+0x6dc/0x9f0 [ 354.427940][ C1] report_bug+0x2be/0x4f0 [ 354.427965][ C1] ? est_timer+0x6dc/0x9f0 [ 354.427988][ C1] ? est_timer+0x6dc/0x9f0 [ 354.428010][ C1] ? est_timer+0x6de/0x9f0 [ 354.428032][ C1] handle_bug+0x84/0x160 [ 354.428062][ C1] exc_invalid_op+0x1a/0x50 [ 354.428091][ C1] asm_exc_invalid_op+0x1a/0x20 [ 354.428112][ C1] RIP: 0010:est_timer+0x6dc/0x9f0 [ 354.428133][ C1] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 7d 35 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 95 fd e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 354.428152][ C1] RSP: 0018:ffffc90000a3f7a0 EFLAGS: 00010246 [ 354.428170][ C1] RAX: ffffffff88dc5ebb RBX: 0000000000000001 RCX: ffff88801ca89dc0 [ 354.428186][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 354.428200][ C1] RBP: ffffc90000a3f8b0 R08: 0000000000000000 R09: 0000000000000100 [ 354.428215][ C1] R10: dffffc0000000000 R11: fffff52000147f0a R12: 0000000000000008 [ 354.428230][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880378a2268 [ 354.428255][ C1] ? est_timer+0x6db/0x9f0 [ 354.428304][ C1] ? __pfx_est_timer+0x10/0x10 [ 354.428341][ C1] call_timer_fn+0x17b/0x5f0 [ 354.428366][ C1] ? __pfx_est_timer+0x10/0x10 [ 354.428387][ C1] ? call_timer_fn+0xbe/0x5f0 [ 354.428414][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 354.428453][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.428480][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.428504][ C1] ? __pfx_est_timer+0x10/0x10 [ 354.428529][ C1] __run_timer_base+0x648/0x970 [ 354.428574][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 354.428627][ C1] run_timer_softirq+0xb7/0x180 [ 354.428654][ C1] handle_softirqs+0x22c/0x710 [ 354.428692][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 354.428732][ C1] run_ktimerd+0xcf/0x190 [ 354.428760][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 354.428786][ C1] ? schedule+0x91/0x360 [ 354.428820][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 354.428845][ C1] smpboot_thread_fn+0x542/0xa60 [ 354.428873][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 354.428911][ C1] kthread+0x711/0x8a0 [ 354.428946][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 354.428972][ C1] ? __pfx_kthread+0x10/0x10 [ 354.429009][ C1] ? __pfx_kthread+0x10/0x10 [ 354.429042][ C1] ret_from_fork+0x3fc/0x770 [ 354.429072][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 354.429108][ C1] ? __switch_to_asm+0x39/0x70 [ 354.429127][ C1] ? __switch_to_asm+0x33/0x70 [ 354.429146][ C1] ? __pfx_kthread+0x10/0x10 [ 354.429178][ C1] ret_from_fork_asm+0x1a/0x30 [ 354.429219][ C1] [ 354.429484][ C1] Kernel Offset: disabled